This source file includes following definitions.
- brcmf_msgbuf_init_pktids
- brcmf_msgbuf_alloc_pktid
- brcmf_msgbuf_get_pktid
- brcmf_msgbuf_release_array
- brcmf_msgbuf_release_pktids
- brcmf_msgbuf_tx_ioctl
- brcmf_msgbuf_ioctl_resp_wait
- brcmf_msgbuf_ioctl_resp_wake
- brcmf_msgbuf_query_dcmd
- brcmf_msgbuf_set_dcmd
- brcmf_msgbuf_hdrpull
- brcmf_msgbuf_rxreorder
- brcmf_msgbuf_remove_flowring
- brcmf_msgbuf_dequeue_work
- brcmf_msgbuf_flowring_create_worker
- brcmf_msgbuf_flowring_worker
- brcmf_msgbuf_flowring_create
- brcmf_msgbuf_txflow
- brcmf_msgbuf_txflow_worker
- brcmf_msgbuf_schedule_txdata
- brcmf_msgbuf_tx_queue_data
- brcmf_msgbuf_configure_addr_mode
- brcmf_msgbuf_delete_peer
- brcmf_msgbuf_add_tdls_peer
- brcmf_msgbuf_process_ioctl_complete
- brcmf_msgbuf_process_txstatus
- brcmf_msgbuf_rxbuf_data_post
- brcmf_msgbuf_rxbuf_data_fill
- brcmf_msgbuf_update_rxbufpost_count
- brcmf_msgbuf_rxbuf_ctrl_post
- brcmf_msgbuf_rxbuf_ioctlresp_post
- brcmf_msgbuf_rxbuf_event_post
- brcmf_msgbuf_process_event
- brcmf_msgbuf_process_rx_complete
- brcmf_msgbuf_process_gen_status
- brcmf_msgbuf_process_ring_status
- brcmf_msgbuf_process_flow_ring_create_response
- brcmf_msgbuf_process_flow_ring_delete_response
- brcmf_msgbuf_process_msgtype
- brcmf_msgbuf_process_rx
- brcmf_proto_msgbuf_rx_trigger
- brcmf_msgbuf_delete_flowring
- brcmf_msgbuf_stats_read
- brcmf_msgbuf_stats_read
- brcmf_msgbuf_debugfs_create
- brcmf_proto_msgbuf_attach
- brcmf_proto_msgbuf_detach
1
2
3
4
5
6
7
8
9
10
11 #include <linux/types.h>
12 #include <linux/netdevice.h>
13 #include <linux/etherdevice.h>
14
15 #include <brcmu_utils.h>
16 #include <brcmu_wifi.h>
17
18 #include "core.h"
19 #include "debug.h"
20 #include "proto.h"
21 #include "msgbuf.h"
22 #include "commonring.h"
23 #include "flowring.h"
24 #include "bus.h"
25 #include "tracepoint.h"
26
27
28 #define MSGBUF_IOCTL_RESP_TIMEOUT msecs_to_jiffies(2000)
29
30 #define MSGBUF_TYPE_GEN_STATUS 0x1
31 #define MSGBUF_TYPE_RING_STATUS 0x2
32 #define MSGBUF_TYPE_FLOW_RING_CREATE 0x3
33 #define MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT 0x4
34 #define MSGBUF_TYPE_FLOW_RING_DELETE 0x5
35 #define MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT 0x6
36 #define MSGBUF_TYPE_FLOW_RING_FLUSH 0x7
37 #define MSGBUF_TYPE_FLOW_RING_FLUSH_CMPLT 0x8
38 #define MSGBUF_TYPE_IOCTLPTR_REQ 0x9
39 #define MSGBUF_TYPE_IOCTLPTR_REQ_ACK 0xA
40 #define MSGBUF_TYPE_IOCTLRESP_BUF_POST 0xB
41 #define MSGBUF_TYPE_IOCTL_CMPLT 0xC
42 #define MSGBUF_TYPE_EVENT_BUF_POST 0xD
43 #define MSGBUF_TYPE_WL_EVENT 0xE
44 #define MSGBUF_TYPE_TX_POST 0xF
45 #define MSGBUF_TYPE_TX_STATUS 0x10
46 #define MSGBUF_TYPE_RXBUF_POST 0x11
47 #define MSGBUF_TYPE_RX_CMPLT 0x12
48 #define MSGBUF_TYPE_LPBK_DMAXFER 0x13
49 #define MSGBUF_TYPE_LPBK_DMAXFER_CMPLT 0x14
50
51 #define NR_TX_PKTIDS 2048
52 #define NR_RX_PKTIDS 1024
53
54 #define BRCMF_IOCTL_REQ_PKTID 0xFFFE
55
56 #define BRCMF_MSGBUF_MAX_PKT_SIZE 2048
57 #define BRCMF_MSGBUF_RXBUFPOST_THRESHOLD 32
58 #define BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST 8
59 #define BRCMF_MSGBUF_MAX_EVENTBUF_POST 8
60
61 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3 0x01
62 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_11 0x02
63 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_MASK 0x07
64 #define BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT 5
65
66 #define BRCMF_MSGBUF_TX_FLUSH_CNT1 32
67 #define BRCMF_MSGBUF_TX_FLUSH_CNT2 96
68
69 #define BRCMF_MSGBUF_DELAY_TXWORKER_THRS 96
70 #define BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS 32
71 #define BRCMF_MSGBUF_UPDATE_RX_PTR_THRS 48
72
73
74 struct msgbuf_common_hdr {
75 u8 msgtype;
76 u8 ifidx;
77 u8 flags;
78 u8 rsvd0;
79 __le32 request_id;
80 };
81
82 struct msgbuf_ioctl_req_hdr {
83 struct msgbuf_common_hdr msg;
84 __le32 cmd;
85 __le16 trans_id;
86 __le16 input_buf_len;
87 __le16 output_buf_len;
88 __le16 rsvd0[3];
89 struct msgbuf_buf_addr req_buf_addr;
90 __le32 rsvd1[2];
91 };
92
93 struct msgbuf_tx_msghdr {
94 struct msgbuf_common_hdr msg;
95 u8 txhdr[ETH_HLEN];
96 u8 flags;
97 u8 seg_cnt;
98 struct msgbuf_buf_addr metadata_buf_addr;
99 struct msgbuf_buf_addr data_buf_addr;
100 __le16 metadata_buf_len;
101 __le16 data_len;
102 __le32 rsvd0;
103 };
104
105 struct msgbuf_rx_bufpost {
106 struct msgbuf_common_hdr msg;
107 __le16 metadata_buf_len;
108 __le16 data_buf_len;
109 __le32 rsvd0;
110 struct msgbuf_buf_addr metadata_buf_addr;
111 struct msgbuf_buf_addr data_buf_addr;
112 };
113
114 struct msgbuf_rx_ioctl_resp_or_event {
115 struct msgbuf_common_hdr msg;
116 __le16 host_buf_len;
117 __le16 rsvd0[3];
118 struct msgbuf_buf_addr host_buf_addr;
119 __le32 rsvd1[4];
120 };
121
122 struct msgbuf_completion_hdr {
123 __le16 status;
124 __le16 flow_ring_id;
125 };
126
127
128 struct msgbuf_gen_status {
129 struct msgbuf_common_hdr msg;
130 struct msgbuf_completion_hdr compl_hdr;
131 __le16 write_idx;
132 __le32 rsvd0[3];
133 };
134
135
136 struct msgbuf_ring_status {
137 struct msgbuf_common_hdr msg;
138 struct msgbuf_completion_hdr compl_hdr;
139 __le16 write_idx;
140 __le16 rsvd0[5];
141 };
142
143 struct msgbuf_rx_event {
144 struct msgbuf_common_hdr msg;
145 struct msgbuf_completion_hdr compl_hdr;
146 __le16 event_data_len;
147 __le16 seqnum;
148 __le16 rsvd0[4];
149 };
150
151 struct msgbuf_ioctl_resp_hdr {
152 struct msgbuf_common_hdr msg;
153 struct msgbuf_completion_hdr compl_hdr;
154 __le16 resp_len;
155 __le16 trans_id;
156 __le32 cmd;
157 __le32 rsvd0;
158 };
159
160 struct msgbuf_tx_status {
161 struct msgbuf_common_hdr msg;
162 struct msgbuf_completion_hdr compl_hdr;
163 __le16 metadata_len;
164 __le16 tx_status;
165 };
166
167 struct msgbuf_rx_complete {
168 struct msgbuf_common_hdr msg;
169 struct msgbuf_completion_hdr compl_hdr;
170 __le16 metadata_len;
171 __le16 data_len;
172 __le16 data_offset;
173 __le16 flags;
174 __le32 rx_status_0;
175 __le32 rx_status_1;
176 __le32 rsvd0;
177 };
178
179 struct msgbuf_tx_flowring_create_req {
180 struct msgbuf_common_hdr msg;
181 u8 da[ETH_ALEN];
182 u8 sa[ETH_ALEN];
183 u8 tid;
184 u8 if_flags;
185 __le16 flow_ring_id;
186 u8 tc;
187 u8 priority;
188 __le16 int_vector;
189 __le16 max_items;
190 __le16 len_item;
191 struct msgbuf_buf_addr flow_ring_addr;
192 };
193
194 struct msgbuf_tx_flowring_delete_req {
195 struct msgbuf_common_hdr msg;
196 __le16 flow_ring_id;
197 __le16 reason;
198 __le32 rsvd0[7];
199 };
200
201 struct msgbuf_flowring_create_resp {
202 struct msgbuf_common_hdr msg;
203 struct msgbuf_completion_hdr compl_hdr;
204 __le32 rsvd0[3];
205 };
206
207 struct msgbuf_flowring_delete_resp {
208 struct msgbuf_common_hdr msg;
209 struct msgbuf_completion_hdr compl_hdr;
210 __le32 rsvd0[3];
211 };
212
213 struct msgbuf_flowring_flush_resp {
214 struct msgbuf_common_hdr msg;
215 struct msgbuf_completion_hdr compl_hdr;
216 __le32 rsvd0[3];
217 };
218
219 struct brcmf_msgbuf_work_item {
220 struct list_head queue;
221 u32 flowid;
222 int ifidx;
223 u8 sa[ETH_ALEN];
224 u8 da[ETH_ALEN];
225 };
226
227 struct brcmf_msgbuf {
228 struct brcmf_pub *drvr;
229
230 struct brcmf_commonring **commonrings;
231 struct brcmf_commonring **flowrings;
232 dma_addr_t *flowring_dma_handle;
233
234 u16 max_flowrings;
235 u16 max_submissionrings;
236 u16 max_completionrings;
237
238 u16 rx_dataoffset;
239 u32 max_rxbufpost;
240 u16 rx_metadata_offset;
241 u32 rxbufpost;
242
243 u32 max_ioctlrespbuf;
244 u32 cur_ioctlrespbuf;
245 u32 max_eventbuf;
246 u32 cur_eventbuf;
247
248 void *ioctbuf;
249 dma_addr_t ioctbuf_handle;
250 u32 ioctbuf_phys_hi;
251 u32 ioctbuf_phys_lo;
252 int ioctl_resp_status;
253 u32 ioctl_resp_ret_len;
254 u32 ioctl_resp_pktid;
255
256 u16 data_seq_no;
257 u16 ioctl_seq_no;
258 u32 reqid;
259 wait_queue_head_t ioctl_resp_wait;
260 bool ctl_completed;
261
262 struct brcmf_msgbuf_pktids *tx_pktids;
263 struct brcmf_msgbuf_pktids *rx_pktids;
264 struct brcmf_flowring *flow;
265
266 struct workqueue_struct *txflow_wq;
267 struct work_struct txflow_work;
268 unsigned long *flow_map;
269 unsigned long *txstatus_done_map;
270
271 struct work_struct flowring_work;
272 spinlock_t flowring_work_lock;
273 struct list_head work_queue;
274 };
275
276 struct brcmf_msgbuf_pktid {
277 atomic_t allocated;
278 u16 data_offset;
279 struct sk_buff *skb;
280 dma_addr_t physaddr;
281 };
282
283 struct brcmf_msgbuf_pktids {
284 u32 array_size;
285 u32 last_allocated_idx;
286 enum dma_data_direction direction;
287 struct brcmf_msgbuf_pktid *array;
288 };
289
290 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf);
291
292
293 static struct brcmf_msgbuf_pktids *
294 brcmf_msgbuf_init_pktids(u32 nr_array_entries,
295 enum dma_data_direction direction)
296 {
297 struct brcmf_msgbuf_pktid *array;
298 struct brcmf_msgbuf_pktids *pktids;
299
300 array = kcalloc(nr_array_entries, sizeof(*array), GFP_KERNEL);
301 if (!array)
302 return NULL;
303
304 pktids = kzalloc(sizeof(*pktids), GFP_KERNEL);
305 if (!pktids) {
306 kfree(array);
307 return NULL;
308 }
309 pktids->array = array;
310 pktids->array_size = nr_array_entries;
311
312 return pktids;
313 }
314
315
316 static int
317 brcmf_msgbuf_alloc_pktid(struct device *dev,
318 struct brcmf_msgbuf_pktids *pktids,
319 struct sk_buff *skb, u16 data_offset,
320 dma_addr_t *physaddr, u32 *idx)
321 {
322 struct brcmf_msgbuf_pktid *array;
323 u32 count;
324
325 array = pktids->array;
326
327 *physaddr = dma_map_single(dev, skb->data + data_offset,
328 skb->len - data_offset, pktids->direction);
329
330 if (dma_mapping_error(dev, *physaddr)) {
331 brcmf_err("dma_map_single failed !!\n");
332 return -ENOMEM;
333 }
334
335 *idx = pktids->last_allocated_idx;
336
337 count = 0;
338 do {
339 (*idx)++;
340 if (*idx == pktids->array_size)
341 *idx = 0;
342 if (array[*idx].allocated.counter == 0)
343 if (atomic_cmpxchg(&array[*idx].allocated, 0, 1) == 0)
344 break;
345 count++;
346 } while (count < pktids->array_size);
347
348 if (count == pktids->array_size)
349 return -ENOMEM;
350
351 array[*idx].data_offset = data_offset;
352 array[*idx].physaddr = *physaddr;
353 array[*idx].skb = skb;
354
355 pktids->last_allocated_idx = *idx;
356
357 return 0;
358 }
359
360
361 static struct sk_buff *
362 brcmf_msgbuf_get_pktid(struct device *dev, struct brcmf_msgbuf_pktids *pktids,
363 u32 idx)
364 {
365 struct brcmf_msgbuf_pktid *pktid;
366 struct sk_buff *skb;
367
368 if (idx < 0 || idx >= pktids->array_size) {
369 brcmf_err("Invalid packet id %d (max %d)\n", idx,
370 pktids->array_size);
371 return NULL;
372 }
373 if (pktids->array[idx].allocated.counter) {
374 pktid = &pktids->array[idx];
375 dma_unmap_single(dev, pktid->physaddr,
376 pktid->skb->len - pktid->data_offset,
377 pktids->direction);
378 skb = pktid->skb;
379 pktid->allocated.counter = 0;
380 return skb;
381 } else {
382 brcmf_err("Invalid packet id %d (not in use)\n", idx);
383 }
384
385 return NULL;
386 }
387
388
389 static void
390 brcmf_msgbuf_release_array(struct device *dev,
391 struct brcmf_msgbuf_pktids *pktids)
392 {
393 struct brcmf_msgbuf_pktid *array;
394 struct brcmf_msgbuf_pktid *pktid;
395 u32 count;
396
397 array = pktids->array;
398 count = 0;
399 do {
400 if (array[count].allocated.counter) {
401 pktid = &array[count];
402 dma_unmap_single(dev, pktid->physaddr,
403 pktid->skb->len - pktid->data_offset,
404 pktids->direction);
405 brcmu_pkt_buf_free_skb(pktid->skb);
406 }
407 count++;
408 } while (count < pktids->array_size);
409
410 kfree(array);
411 kfree(pktids);
412 }
413
414
415 static void brcmf_msgbuf_release_pktids(struct brcmf_msgbuf *msgbuf)
416 {
417 if (msgbuf->rx_pktids)
418 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
419 msgbuf->rx_pktids);
420 if (msgbuf->tx_pktids)
421 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
422 msgbuf->tx_pktids);
423 }
424
425
426 static int brcmf_msgbuf_tx_ioctl(struct brcmf_pub *drvr, int ifidx,
427 uint cmd, void *buf, uint len)
428 {
429 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
430 struct brcmf_commonring *commonring;
431 struct msgbuf_ioctl_req_hdr *request;
432 u16 buf_len;
433 void *ret_ptr;
434 int err;
435
436 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
437 brcmf_commonring_lock(commonring);
438 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
439 if (!ret_ptr) {
440 bphy_err(drvr, "Failed to reserve space in commonring\n");
441 brcmf_commonring_unlock(commonring);
442 return -ENOMEM;
443 }
444
445 msgbuf->reqid++;
446
447 request = (struct msgbuf_ioctl_req_hdr *)ret_ptr;
448 request->msg.msgtype = MSGBUF_TYPE_IOCTLPTR_REQ;
449 request->msg.ifidx = (u8)ifidx;
450 request->msg.flags = 0;
451 request->msg.request_id = cpu_to_le32(BRCMF_IOCTL_REQ_PKTID);
452 request->cmd = cpu_to_le32(cmd);
453 request->output_buf_len = cpu_to_le16(len);
454 request->trans_id = cpu_to_le16(msgbuf->reqid);
455
456 buf_len = min_t(u16, len, BRCMF_TX_IOCTL_MAX_MSG_SIZE);
457 request->input_buf_len = cpu_to_le16(buf_len);
458 request->req_buf_addr.high_addr = cpu_to_le32(msgbuf->ioctbuf_phys_hi);
459 request->req_buf_addr.low_addr = cpu_to_le32(msgbuf->ioctbuf_phys_lo);
460 if (buf)
461 memcpy(msgbuf->ioctbuf, buf, buf_len);
462 else
463 memset(msgbuf->ioctbuf, 0, buf_len);
464
465 err = brcmf_commonring_write_complete(commonring);
466 brcmf_commonring_unlock(commonring);
467
468 return err;
469 }
470
471
472 static int brcmf_msgbuf_ioctl_resp_wait(struct brcmf_msgbuf *msgbuf)
473 {
474 return wait_event_timeout(msgbuf->ioctl_resp_wait,
475 msgbuf->ctl_completed,
476 MSGBUF_IOCTL_RESP_TIMEOUT);
477 }
478
479
480 static void brcmf_msgbuf_ioctl_resp_wake(struct brcmf_msgbuf *msgbuf)
481 {
482 msgbuf->ctl_completed = true;
483 wake_up(&msgbuf->ioctl_resp_wait);
484 }
485
486
487 static int brcmf_msgbuf_query_dcmd(struct brcmf_pub *drvr, int ifidx,
488 uint cmd, void *buf, uint len, int *fwerr)
489 {
490 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
491 struct sk_buff *skb = NULL;
492 int timeout;
493 int err;
494
495 brcmf_dbg(MSGBUF, "ifidx=%d, cmd=%d, len=%d\n", ifidx, cmd, len);
496 *fwerr = 0;
497 msgbuf->ctl_completed = false;
498 err = brcmf_msgbuf_tx_ioctl(drvr, ifidx, cmd, buf, len);
499 if (err)
500 return err;
501
502 timeout = brcmf_msgbuf_ioctl_resp_wait(msgbuf);
503 if (!timeout) {
504 bphy_err(drvr, "Timeout on response for query command\n");
505 return -EIO;
506 }
507
508 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
509 msgbuf->rx_pktids,
510 msgbuf->ioctl_resp_pktid);
511 if (msgbuf->ioctl_resp_ret_len != 0) {
512 if (!skb)
513 return -EBADF;
514
515 memcpy(buf, skb->data, (len < msgbuf->ioctl_resp_ret_len) ?
516 len : msgbuf->ioctl_resp_ret_len);
517 }
518 brcmu_pkt_buf_free_skb(skb);
519
520 *fwerr = msgbuf->ioctl_resp_status;
521 return 0;
522 }
523
524
525 static int brcmf_msgbuf_set_dcmd(struct brcmf_pub *drvr, int ifidx,
526 uint cmd, void *buf, uint len, int *fwerr)
527 {
528 return brcmf_msgbuf_query_dcmd(drvr, ifidx, cmd, buf, len, fwerr);
529 }
530
531
532 static int brcmf_msgbuf_hdrpull(struct brcmf_pub *drvr, bool do_fws,
533 struct sk_buff *skb, struct brcmf_if **ifp)
534 {
535 return -ENODEV;
536 }
537
538 static void brcmf_msgbuf_rxreorder(struct brcmf_if *ifp, struct sk_buff *skb)
539 {
540 }
541
542 static void
543 brcmf_msgbuf_remove_flowring(struct brcmf_msgbuf *msgbuf, u16 flowid)
544 {
545 u32 dma_sz;
546 void *dma_buf;
547
548 brcmf_dbg(MSGBUF, "Removing flowring %d\n", flowid);
549
550 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
551 dma_buf = msgbuf->flowrings[flowid]->buf_addr;
552 dma_free_coherent(msgbuf->drvr->bus_if->dev, dma_sz, dma_buf,
553 msgbuf->flowring_dma_handle[flowid]);
554
555 brcmf_flowring_delete(msgbuf->flow, flowid);
556 }
557
558
559 static struct brcmf_msgbuf_work_item *
560 brcmf_msgbuf_dequeue_work(struct brcmf_msgbuf *msgbuf)
561 {
562 struct brcmf_msgbuf_work_item *work = NULL;
563 ulong flags;
564
565 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
566 if (!list_empty(&msgbuf->work_queue)) {
567 work = list_first_entry(&msgbuf->work_queue,
568 struct brcmf_msgbuf_work_item, queue);
569 list_del(&work->queue);
570 }
571 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
572
573 return work;
574 }
575
576
577 static u32
578 brcmf_msgbuf_flowring_create_worker(struct brcmf_msgbuf *msgbuf,
579 struct brcmf_msgbuf_work_item *work)
580 {
581 struct brcmf_pub *drvr = msgbuf->drvr;
582 struct msgbuf_tx_flowring_create_req *create;
583 struct brcmf_commonring *commonring;
584 void *ret_ptr;
585 u32 flowid;
586 void *dma_buf;
587 u32 dma_sz;
588 u64 address;
589 int err;
590
591 flowid = work->flowid;
592 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
593 dma_buf = dma_alloc_coherent(msgbuf->drvr->bus_if->dev, dma_sz,
594 &msgbuf->flowring_dma_handle[flowid],
595 GFP_KERNEL);
596 if (!dma_buf) {
597 bphy_err(drvr, "dma_alloc_coherent failed\n");
598 brcmf_flowring_delete(msgbuf->flow, flowid);
599 return BRCMF_FLOWRING_INVALID_ID;
600 }
601
602 brcmf_commonring_config(msgbuf->flowrings[flowid],
603 BRCMF_H2D_TXFLOWRING_MAX_ITEM,
604 BRCMF_H2D_TXFLOWRING_ITEMSIZE, dma_buf);
605
606 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
607 brcmf_commonring_lock(commonring);
608 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
609 if (!ret_ptr) {
610 bphy_err(drvr, "Failed to reserve space in commonring\n");
611 brcmf_commonring_unlock(commonring);
612 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
613 return BRCMF_FLOWRING_INVALID_ID;
614 }
615
616 create = (struct msgbuf_tx_flowring_create_req *)ret_ptr;
617 create->msg.msgtype = MSGBUF_TYPE_FLOW_RING_CREATE;
618 create->msg.ifidx = work->ifidx;
619 create->msg.request_id = 0;
620 create->tid = brcmf_flowring_tid(msgbuf->flow, flowid);
621 create->flow_ring_id = cpu_to_le16(flowid +
622 BRCMF_H2D_MSGRING_FLOWRING_IDSTART);
623 memcpy(create->sa, work->sa, ETH_ALEN);
624 memcpy(create->da, work->da, ETH_ALEN);
625 address = (u64)msgbuf->flowring_dma_handle[flowid];
626 create->flow_ring_addr.high_addr = cpu_to_le32(address >> 32);
627 create->flow_ring_addr.low_addr = cpu_to_le32(address & 0xffffffff);
628 create->max_items = cpu_to_le16(BRCMF_H2D_TXFLOWRING_MAX_ITEM);
629 create->len_item = cpu_to_le16(BRCMF_H2D_TXFLOWRING_ITEMSIZE);
630
631 brcmf_dbg(MSGBUF, "Send Flow Create Req flow ID %d for peer %pM prio %d ifindex %d\n",
632 flowid, work->da, create->tid, work->ifidx);
633
634 err = brcmf_commonring_write_complete(commonring);
635 brcmf_commonring_unlock(commonring);
636 if (err) {
637 bphy_err(drvr, "Failed to write commonring\n");
638 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
639 return BRCMF_FLOWRING_INVALID_ID;
640 }
641
642 return flowid;
643 }
644
645
646 static void brcmf_msgbuf_flowring_worker(struct work_struct *work)
647 {
648 struct brcmf_msgbuf *msgbuf;
649 struct brcmf_msgbuf_work_item *create;
650
651 msgbuf = container_of(work, struct brcmf_msgbuf, flowring_work);
652
653 while ((create = brcmf_msgbuf_dequeue_work(msgbuf))) {
654 brcmf_msgbuf_flowring_create_worker(msgbuf, create);
655 kfree(create);
656 }
657 }
658
659
660 static u32 brcmf_msgbuf_flowring_create(struct brcmf_msgbuf *msgbuf, int ifidx,
661 struct sk_buff *skb)
662 {
663 struct brcmf_msgbuf_work_item *create;
664 struct ethhdr *eh = (struct ethhdr *)(skb->data);
665 u32 flowid;
666 ulong flags;
667
668 create = kzalloc(sizeof(*create), GFP_ATOMIC);
669 if (create == NULL)
670 return BRCMF_FLOWRING_INVALID_ID;
671
672 flowid = brcmf_flowring_create(msgbuf->flow, eh->h_dest,
673 skb->priority, ifidx);
674 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
675 kfree(create);
676 return flowid;
677 }
678
679 create->flowid = flowid;
680 create->ifidx = ifidx;
681 memcpy(create->sa, eh->h_source, ETH_ALEN);
682 memcpy(create->da, eh->h_dest, ETH_ALEN);
683
684 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
685 list_add_tail(&create->queue, &msgbuf->work_queue);
686 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
687 schedule_work(&msgbuf->flowring_work);
688
689 return flowid;
690 }
691
692
693 static void brcmf_msgbuf_txflow(struct brcmf_msgbuf *msgbuf, u16 flowid)
694 {
695 struct brcmf_flowring *flow = msgbuf->flow;
696 struct brcmf_pub *drvr = msgbuf->drvr;
697 struct brcmf_commonring *commonring;
698 void *ret_ptr;
699 u32 count;
700 struct sk_buff *skb;
701 dma_addr_t physaddr;
702 u32 pktid;
703 struct msgbuf_tx_msghdr *tx_msghdr;
704 u64 address;
705
706 commonring = msgbuf->flowrings[flowid];
707 if (!brcmf_commonring_write_available(commonring))
708 return;
709
710 brcmf_commonring_lock(commonring);
711
712 count = BRCMF_MSGBUF_TX_FLUSH_CNT2 - BRCMF_MSGBUF_TX_FLUSH_CNT1;
713 while (brcmf_flowring_qlen(flow, flowid)) {
714 skb = brcmf_flowring_dequeue(flow, flowid);
715 if (skb == NULL) {
716 bphy_err(drvr, "No SKB, but qlen %d\n",
717 brcmf_flowring_qlen(flow, flowid));
718 break;
719 }
720 skb_orphan(skb);
721 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
722 msgbuf->tx_pktids, skb, ETH_HLEN,
723 &physaddr, &pktid)) {
724 brcmf_flowring_reinsert(flow, flowid, skb);
725 bphy_err(drvr, "No PKTID available !!\n");
726 break;
727 }
728 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
729 if (!ret_ptr) {
730 brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
731 msgbuf->tx_pktids, pktid);
732 brcmf_flowring_reinsert(flow, flowid, skb);
733 break;
734 }
735 count++;
736
737 tx_msghdr = (struct msgbuf_tx_msghdr *)ret_ptr;
738
739 tx_msghdr->msg.msgtype = MSGBUF_TYPE_TX_POST;
740 tx_msghdr->msg.request_id = cpu_to_le32(pktid + 1);
741 tx_msghdr->msg.ifidx = brcmf_flowring_ifidx_get(flow, flowid);
742 tx_msghdr->flags = BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3;
743 tx_msghdr->flags |= (skb->priority & 0x07) <<
744 BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT;
745 tx_msghdr->seg_cnt = 1;
746 memcpy(tx_msghdr->txhdr, skb->data, ETH_HLEN);
747 tx_msghdr->data_len = cpu_to_le16(skb->len - ETH_HLEN);
748 address = (u64)physaddr;
749 tx_msghdr->data_buf_addr.high_addr = cpu_to_le32(address >> 32);
750 tx_msghdr->data_buf_addr.low_addr =
751 cpu_to_le32(address & 0xffffffff);
752 tx_msghdr->metadata_buf_len = 0;
753 tx_msghdr->metadata_buf_addr.high_addr = 0;
754 tx_msghdr->metadata_buf_addr.low_addr = 0;
755 atomic_inc(&commonring->outstanding_tx);
756 if (count >= BRCMF_MSGBUF_TX_FLUSH_CNT2) {
757 brcmf_commonring_write_complete(commonring);
758 count = 0;
759 }
760 }
761 if (count)
762 brcmf_commonring_write_complete(commonring);
763 brcmf_commonring_unlock(commonring);
764 }
765
766
767 static void brcmf_msgbuf_txflow_worker(struct work_struct *worker)
768 {
769 struct brcmf_msgbuf *msgbuf;
770 u32 flowid;
771
772 msgbuf = container_of(worker, struct brcmf_msgbuf, txflow_work);
773 for_each_set_bit(flowid, msgbuf->flow_map, msgbuf->max_flowrings) {
774 clear_bit(flowid, msgbuf->flow_map);
775 brcmf_msgbuf_txflow(msgbuf, flowid);
776 }
777 }
778
779
780 static int brcmf_msgbuf_schedule_txdata(struct brcmf_msgbuf *msgbuf, u32 flowid,
781 bool force)
782 {
783 struct brcmf_commonring *commonring;
784
785 set_bit(flowid, msgbuf->flow_map);
786 commonring = msgbuf->flowrings[flowid];
787 if ((force) || (atomic_read(&commonring->outstanding_tx) <
788 BRCMF_MSGBUF_DELAY_TXWORKER_THRS))
789 queue_work(msgbuf->txflow_wq, &msgbuf->txflow_work);
790
791 return 0;
792 }
793
794
795 static int brcmf_msgbuf_tx_queue_data(struct brcmf_pub *drvr, int ifidx,
796 struct sk_buff *skb)
797 {
798 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
799 struct brcmf_flowring *flow = msgbuf->flow;
800 struct ethhdr *eh = (struct ethhdr *)(skb->data);
801 u32 flowid;
802 u32 queue_count;
803 bool force;
804
805 flowid = brcmf_flowring_lookup(flow, eh->h_dest, skb->priority, ifidx);
806 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
807 flowid = brcmf_msgbuf_flowring_create(msgbuf, ifidx, skb);
808 if (flowid == BRCMF_FLOWRING_INVALID_ID)
809 return -ENOMEM;
810 }
811 queue_count = brcmf_flowring_enqueue(flow, flowid, skb);
812 force = ((queue_count % BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) == 0);
813 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, force);
814
815 return 0;
816 }
817
818
819 static void
820 brcmf_msgbuf_configure_addr_mode(struct brcmf_pub *drvr, int ifidx,
821 enum proto_addr_mode addr_mode)
822 {
823 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
824
825 brcmf_flowring_configure_addr_mode(msgbuf->flow, ifidx, addr_mode);
826 }
827
828
829 static void
830 brcmf_msgbuf_delete_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
831 {
832 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
833
834 brcmf_flowring_delete_peer(msgbuf->flow, ifidx, peer);
835 }
836
837
838 static void
839 brcmf_msgbuf_add_tdls_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
840 {
841 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
842
843 brcmf_flowring_add_tdls_peer(msgbuf->flow, ifidx, peer);
844 }
845
846
847 static void
848 brcmf_msgbuf_process_ioctl_complete(struct brcmf_msgbuf *msgbuf, void *buf)
849 {
850 struct msgbuf_ioctl_resp_hdr *ioctl_resp;
851
852 ioctl_resp = (struct msgbuf_ioctl_resp_hdr *)buf;
853
854 msgbuf->ioctl_resp_status =
855 (s16)le16_to_cpu(ioctl_resp->compl_hdr.status);
856 msgbuf->ioctl_resp_ret_len = le16_to_cpu(ioctl_resp->resp_len);
857 msgbuf->ioctl_resp_pktid = le32_to_cpu(ioctl_resp->msg.request_id);
858
859 brcmf_msgbuf_ioctl_resp_wake(msgbuf);
860
861 if (msgbuf->cur_ioctlrespbuf)
862 msgbuf->cur_ioctlrespbuf--;
863 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
864 }
865
866
867 static void
868 brcmf_msgbuf_process_txstatus(struct brcmf_msgbuf *msgbuf, void *buf)
869 {
870 struct brcmf_commonring *commonring;
871 struct msgbuf_tx_status *tx_status;
872 u32 idx;
873 struct sk_buff *skb;
874 u16 flowid;
875
876 tx_status = (struct msgbuf_tx_status *)buf;
877 idx = le32_to_cpu(tx_status->msg.request_id) - 1;
878 flowid = le16_to_cpu(tx_status->compl_hdr.flow_ring_id);
879 flowid -= BRCMF_H2D_MSGRING_FLOWRING_IDSTART;
880 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
881 msgbuf->tx_pktids, idx);
882 if (!skb)
883 return;
884
885 set_bit(flowid, msgbuf->txstatus_done_map);
886 commonring = msgbuf->flowrings[flowid];
887 atomic_dec(&commonring->outstanding_tx);
888
889 brcmf_txfinalize(brcmf_get_ifp(msgbuf->drvr, tx_status->msg.ifidx),
890 skb, true);
891 }
892
893
894 static u32 brcmf_msgbuf_rxbuf_data_post(struct brcmf_msgbuf *msgbuf, u32 count)
895 {
896 struct brcmf_pub *drvr = msgbuf->drvr;
897 struct brcmf_commonring *commonring;
898 void *ret_ptr;
899 struct sk_buff *skb;
900 u16 alloced;
901 u32 pktlen;
902 dma_addr_t physaddr;
903 struct msgbuf_rx_bufpost *rx_bufpost;
904 u64 address;
905 u32 pktid;
906 u32 i;
907
908 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
909 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
910 count,
911 &alloced);
912 if (!ret_ptr) {
913 brcmf_dbg(MSGBUF, "Failed to reserve space in commonring\n");
914 return 0;
915 }
916
917 for (i = 0; i < alloced; i++) {
918 rx_bufpost = (struct msgbuf_rx_bufpost *)ret_ptr;
919 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
920
921 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
922
923 if (skb == NULL) {
924 bphy_err(drvr, "Failed to alloc SKB\n");
925 brcmf_commonring_write_cancel(commonring, alloced - i);
926 break;
927 }
928
929 pktlen = skb->len;
930 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
931 msgbuf->rx_pktids, skb, 0,
932 &physaddr, &pktid)) {
933 dev_kfree_skb_any(skb);
934 bphy_err(drvr, "No PKTID available !!\n");
935 brcmf_commonring_write_cancel(commonring, alloced - i);
936 break;
937 }
938
939 if (msgbuf->rx_metadata_offset) {
940 address = (u64)physaddr;
941 rx_bufpost->metadata_buf_len =
942 cpu_to_le16(msgbuf->rx_metadata_offset);
943 rx_bufpost->metadata_buf_addr.high_addr =
944 cpu_to_le32(address >> 32);
945 rx_bufpost->metadata_buf_addr.low_addr =
946 cpu_to_le32(address & 0xffffffff);
947
948 skb_pull(skb, msgbuf->rx_metadata_offset);
949 pktlen = skb->len;
950 physaddr += msgbuf->rx_metadata_offset;
951 }
952 rx_bufpost->msg.msgtype = MSGBUF_TYPE_RXBUF_POST;
953 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
954
955 address = (u64)physaddr;
956 rx_bufpost->data_buf_len = cpu_to_le16((u16)pktlen);
957 rx_bufpost->data_buf_addr.high_addr =
958 cpu_to_le32(address >> 32);
959 rx_bufpost->data_buf_addr.low_addr =
960 cpu_to_le32(address & 0xffffffff);
961
962 ret_ptr += brcmf_commonring_len_item(commonring);
963 }
964
965 if (i)
966 brcmf_commonring_write_complete(commonring);
967
968 return i;
969 }
970
971
972 static void
973 brcmf_msgbuf_rxbuf_data_fill(struct brcmf_msgbuf *msgbuf)
974 {
975 u32 fillbufs;
976 u32 retcount;
977
978 fillbufs = msgbuf->max_rxbufpost - msgbuf->rxbufpost;
979
980 while (fillbufs) {
981 retcount = brcmf_msgbuf_rxbuf_data_post(msgbuf, fillbufs);
982 if (!retcount)
983 break;
984 msgbuf->rxbufpost += retcount;
985 fillbufs -= retcount;
986 }
987 }
988
989
990 static void
991 brcmf_msgbuf_update_rxbufpost_count(struct brcmf_msgbuf *msgbuf, u16 rxcnt)
992 {
993 msgbuf->rxbufpost -= rxcnt;
994 if (msgbuf->rxbufpost <= (msgbuf->max_rxbufpost -
995 BRCMF_MSGBUF_RXBUFPOST_THRESHOLD))
996 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
997 }
998
999
1000 static u32
1001 brcmf_msgbuf_rxbuf_ctrl_post(struct brcmf_msgbuf *msgbuf, bool event_buf,
1002 u32 count)
1003 {
1004 struct brcmf_pub *drvr = msgbuf->drvr;
1005 struct brcmf_commonring *commonring;
1006 void *ret_ptr;
1007 struct sk_buff *skb;
1008 u16 alloced;
1009 u32 pktlen;
1010 dma_addr_t physaddr;
1011 struct msgbuf_rx_ioctl_resp_or_event *rx_bufpost;
1012 u64 address;
1013 u32 pktid;
1014 u32 i;
1015
1016 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1017 brcmf_commonring_lock(commonring);
1018 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
1019 count,
1020 &alloced);
1021 if (!ret_ptr) {
1022 bphy_err(drvr, "Failed to reserve space in commonring\n");
1023 brcmf_commonring_unlock(commonring);
1024 return 0;
1025 }
1026
1027 for (i = 0; i < alloced; i++) {
1028 rx_bufpost = (struct msgbuf_rx_ioctl_resp_or_event *)ret_ptr;
1029 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
1030
1031 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
1032
1033 if (skb == NULL) {
1034 bphy_err(drvr, "Failed to alloc SKB\n");
1035 brcmf_commonring_write_cancel(commonring, alloced - i);
1036 break;
1037 }
1038
1039 pktlen = skb->len;
1040 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
1041 msgbuf->rx_pktids, skb, 0,
1042 &physaddr, &pktid)) {
1043 dev_kfree_skb_any(skb);
1044 bphy_err(drvr, "No PKTID available !!\n");
1045 brcmf_commonring_write_cancel(commonring, alloced - i);
1046 break;
1047 }
1048 if (event_buf)
1049 rx_bufpost->msg.msgtype = MSGBUF_TYPE_EVENT_BUF_POST;
1050 else
1051 rx_bufpost->msg.msgtype =
1052 MSGBUF_TYPE_IOCTLRESP_BUF_POST;
1053 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
1054
1055 address = (u64)physaddr;
1056 rx_bufpost->host_buf_len = cpu_to_le16((u16)pktlen);
1057 rx_bufpost->host_buf_addr.high_addr =
1058 cpu_to_le32(address >> 32);
1059 rx_bufpost->host_buf_addr.low_addr =
1060 cpu_to_le32(address & 0xffffffff);
1061
1062 ret_ptr += brcmf_commonring_len_item(commonring);
1063 }
1064
1065 if (i)
1066 brcmf_commonring_write_complete(commonring);
1067
1068 brcmf_commonring_unlock(commonring);
1069
1070 return i;
1071 }
1072
1073
1074 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf)
1075 {
1076 u32 count;
1077
1078 count = msgbuf->max_ioctlrespbuf - msgbuf->cur_ioctlrespbuf;
1079 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, false, count);
1080 msgbuf->cur_ioctlrespbuf += count;
1081 }
1082
1083
1084 static void brcmf_msgbuf_rxbuf_event_post(struct brcmf_msgbuf *msgbuf)
1085 {
1086 u32 count;
1087
1088 count = msgbuf->max_eventbuf - msgbuf->cur_eventbuf;
1089 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, true, count);
1090 msgbuf->cur_eventbuf += count;
1091 }
1092
1093
1094 static void brcmf_msgbuf_process_event(struct brcmf_msgbuf *msgbuf, void *buf)
1095 {
1096 struct brcmf_pub *drvr = msgbuf->drvr;
1097 struct msgbuf_rx_event *event;
1098 u32 idx;
1099 u16 buflen;
1100 struct sk_buff *skb;
1101 struct brcmf_if *ifp;
1102
1103 event = (struct msgbuf_rx_event *)buf;
1104 idx = le32_to_cpu(event->msg.request_id);
1105 buflen = le16_to_cpu(event->event_data_len);
1106
1107 if (msgbuf->cur_eventbuf)
1108 msgbuf->cur_eventbuf--;
1109 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1110
1111 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1112 msgbuf->rx_pktids, idx);
1113 if (!skb)
1114 return;
1115
1116 if (msgbuf->rx_dataoffset)
1117 skb_pull(skb, msgbuf->rx_dataoffset);
1118
1119 skb_trim(skb, buflen);
1120
1121 ifp = brcmf_get_ifp(msgbuf->drvr, event->msg.ifidx);
1122 if (!ifp || !ifp->ndev) {
1123 bphy_err(drvr, "Received pkt for invalid ifidx %d\n",
1124 event->msg.ifidx);
1125 goto exit;
1126 }
1127
1128 skb->protocol = eth_type_trans(skb, ifp->ndev);
1129
1130 brcmf_fweh_process_skb(ifp->drvr, skb, 0);
1131
1132 exit:
1133 brcmu_pkt_buf_free_skb(skb);
1134 }
1135
1136
1137 static void
1138 brcmf_msgbuf_process_rx_complete(struct brcmf_msgbuf *msgbuf, void *buf)
1139 {
1140 struct brcmf_pub *drvr = msgbuf->drvr;
1141 struct msgbuf_rx_complete *rx_complete;
1142 struct sk_buff *skb;
1143 u16 data_offset;
1144 u16 buflen;
1145 u16 flags;
1146 u32 idx;
1147 struct brcmf_if *ifp;
1148
1149 brcmf_msgbuf_update_rxbufpost_count(msgbuf, 1);
1150
1151 rx_complete = (struct msgbuf_rx_complete *)buf;
1152 data_offset = le16_to_cpu(rx_complete->data_offset);
1153 buflen = le16_to_cpu(rx_complete->data_len);
1154 idx = le32_to_cpu(rx_complete->msg.request_id);
1155 flags = le16_to_cpu(rx_complete->flags);
1156
1157 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1158 msgbuf->rx_pktids, idx);
1159 if (!skb)
1160 return;
1161
1162 if (data_offset)
1163 skb_pull(skb, data_offset);
1164 else if (msgbuf->rx_dataoffset)
1165 skb_pull(skb, msgbuf->rx_dataoffset);
1166
1167 skb_trim(skb, buflen);
1168
1169 if ((flags & BRCMF_MSGBUF_PKT_FLAGS_FRAME_MASK) ==
1170 BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_11) {
1171 ifp = msgbuf->drvr->mon_if;
1172
1173 if (!ifp) {
1174 bphy_err(drvr, "Received unexpected monitor pkt\n");
1175 brcmu_pkt_buf_free_skb(skb);
1176 return;
1177 }
1178
1179 brcmf_netif_mon_rx(ifp, skb);
1180 return;
1181 }
1182
1183 ifp = brcmf_get_ifp(msgbuf->drvr, rx_complete->msg.ifidx);
1184 if (!ifp || !ifp->ndev) {
1185 bphy_err(drvr, "Received pkt for invalid ifidx %d\n",
1186 rx_complete->msg.ifidx);
1187 brcmu_pkt_buf_free_skb(skb);
1188 return;
1189 }
1190
1191 skb->protocol = eth_type_trans(skb, ifp->ndev);
1192 brcmf_netif_rx(ifp, skb);
1193 }
1194
1195 static void brcmf_msgbuf_process_gen_status(struct brcmf_msgbuf *msgbuf,
1196 void *buf)
1197 {
1198 struct msgbuf_gen_status *gen_status = buf;
1199 struct brcmf_pub *drvr = msgbuf->drvr;
1200 int err;
1201
1202 err = le16_to_cpu(gen_status->compl_hdr.status);
1203 if (err)
1204 bphy_err(drvr, "Firmware reported general error: %d\n", err);
1205 }
1206
1207 static void brcmf_msgbuf_process_ring_status(struct brcmf_msgbuf *msgbuf,
1208 void *buf)
1209 {
1210 struct msgbuf_ring_status *ring_status = buf;
1211 struct brcmf_pub *drvr = msgbuf->drvr;
1212 int err;
1213
1214 err = le16_to_cpu(ring_status->compl_hdr.status);
1215 if (err) {
1216 int ring = le16_to_cpu(ring_status->compl_hdr.flow_ring_id);
1217
1218 bphy_err(drvr, "Firmware reported ring %d error: %d\n", ring,
1219 err);
1220 }
1221 }
1222
1223 static void
1224 brcmf_msgbuf_process_flow_ring_create_response(struct brcmf_msgbuf *msgbuf,
1225 void *buf)
1226 {
1227 struct brcmf_pub *drvr = msgbuf->drvr;
1228 struct msgbuf_flowring_create_resp *flowring_create_resp;
1229 u16 status;
1230 u16 flowid;
1231
1232 flowring_create_resp = (struct msgbuf_flowring_create_resp *)buf;
1233
1234 flowid = le16_to_cpu(flowring_create_resp->compl_hdr.flow_ring_id);
1235 flowid -= BRCMF_H2D_MSGRING_FLOWRING_IDSTART;
1236 status = le16_to_cpu(flowring_create_resp->compl_hdr.status);
1237
1238 if (status) {
1239 bphy_err(drvr, "Flowring creation failed, code %d\n", status);
1240 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1241 return;
1242 }
1243 brcmf_dbg(MSGBUF, "Flowring %d Create response status %d\n", flowid,
1244 status);
1245
1246 brcmf_flowring_open(msgbuf->flow, flowid);
1247
1248 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1249 }
1250
1251
1252 static void
1253 brcmf_msgbuf_process_flow_ring_delete_response(struct brcmf_msgbuf *msgbuf,
1254 void *buf)
1255 {
1256 struct brcmf_pub *drvr = msgbuf->drvr;
1257 struct msgbuf_flowring_delete_resp *flowring_delete_resp;
1258 u16 status;
1259 u16 flowid;
1260
1261 flowring_delete_resp = (struct msgbuf_flowring_delete_resp *)buf;
1262
1263 flowid = le16_to_cpu(flowring_delete_resp->compl_hdr.flow_ring_id);
1264 flowid -= BRCMF_H2D_MSGRING_FLOWRING_IDSTART;
1265 status = le16_to_cpu(flowring_delete_resp->compl_hdr.status);
1266
1267 if (status) {
1268 bphy_err(drvr, "Flowring deletion failed, code %d\n", status);
1269 brcmf_flowring_delete(msgbuf->flow, flowid);
1270 return;
1271 }
1272 brcmf_dbg(MSGBUF, "Flowring %d Delete response status %d\n", flowid,
1273 status);
1274
1275 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1276 }
1277
1278
1279 static void brcmf_msgbuf_process_msgtype(struct brcmf_msgbuf *msgbuf, void *buf)
1280 {
1281 struct brcmf_pub *drvr = msgbuf->drvr;
1282 struct msgbuf_common_hdr *msg;
1283
1284 msg = (struct msgbuf_common_hdr *)buf;
1285 switch (msg->msgtype) {
1286 case MSGBUF_TYPE_GEN_STATUS:
1287 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_GEN_STATUS\n");
1288 brcmf_msgbuf_process_gen_status(msgbuf, buf);
1289 break;
1290 case MSGBUF_TYPE_RING_STATUS:
1291 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_RING_STATUS\n");
1292 brcmf_msgbuf_process_ring_status(msgbuf, buf);
1293 break;
1294 case MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT:
1295 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT\n");
1296 brcmf_msgbuf_process_flow_ring_create_response(msgbuf, buf);
1297 break;
1298 case MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT:
1299 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT\n");
1300 brcmf_msgbuf_process_flow_ring_delete_response(msgbuf, buf);
1301 break;
1302 case MSGBUF_TYPE_IOCTLPTR_REQ_ACK:
1303 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTLPTR_REQ_ACK\n");
1304 break;
1305 case MSGBUF_TYPE_IOCTL_CMPLT:
1306 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTL_CMPLT\n");
1307 brcmf_msgbuf_process_ioctl_complete(msgbuf, buf);
1308 break;
1309 case MSGBUF_TYPE_WL_EVENT:
1310 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_WL_EVENT\n");
1311 brcmf_msgbuf_process_event(msgbuf, buf);
1312 break;
1313 case MSGBUF_TYPE_TX_STATUS:
1314 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_TX_STATUS\n");
1315 brcmf_msgbuf_process_txstatus(msgbuf, buf);
1316 break;
1317 case MSGBUF_TYPE_RX_CMPLT:
1318 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_RX_CMPLT\n");
1319 brcmf_msgbuf_process_rx_complete(msgbuf, buf);
1320 break;
1321 default:
1322 bphy_err(drvr, "Unsupported msgtype %d\n", msg->msgtype);
1323 break;
1324 }
1325 }
1326
1327
1328 static void brcmf_msgbuf_process_rx(struct brcmf_msgbuf *msgbuf,
1329 struct brcmf_commonring *commonring)
1330 {
1331 void *buf;
1332 u16 count;
1333 u16 processed;
1334
1335 again:
1336 buf = brcmf_commonring_get_read_ptr(commonring, &count);
1337 if (buf == NULL)
1338 return;
1339
1340 processed = 0;
1341 while (count) {
1342 brcmf_msgbuf_process_msgtype(msgbuf,
1343 buf + msgbuf->rx_dataoffset);
1344 buf += brcmf_commonring_len_item(commonring);
1345 processed++;
1346 if (processed == BRCMF_MSGBUF_UPDATE_RX_PTR_THRS) {
1347 brcmf_commonring_read_complete(commonring, processed);
1348 processed = 0;
1349 }
1350 count--;
1351 }
1352 if (processed)
1353 brcmf_commonring_read_complete(commonring, processed);
1354
1355 if (commonring->r_ptr == 0)
1356 goto again;
1357 }
1358
1359
1360 int brcmf_proto_msgbuf_rx_trigger(struct device *dev)
1361 {
1362 struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1363 struct brcmf_pub *drvr = bus_if->drvr;
1364 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1365 struct brcmf_commonring *commonring;
1366 void *buf;
1367 u32 flowid;
1368 int qlen;
1369
1370 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1371 brcmf_msgbuf_process_rx(msgbuf, buf);
1372 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1373 brcmf_msgbuf_process_rx(msgbuf, buf);
1374 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1375 brcmf_msgbuf_process_rx(msgbuf, buf);
1376
1377 for_each_set_bit(flowid, msgbuf->txstatus_done_map,
1378 msgbuf->max_flowrings) {
1379 clear_bit(flowid, msgbuf->txstatus_done_map);
1380 commonring = msgbuf->flowrings[flowid];
1381 qlen = brcmf_flowring_qlen(msgbuf->flow, flowid);
1382 if ((qlen > BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) ||
1383 ((qlen) && (atomic_read(&commonring->outstanding_tx) <
1384 BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS)))
1385 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1386 }
1387
1388 return 0;
1389 }
1390
1391
1392 void brcmf_msgbuf_delete_flowring(struct brcmf_pub *drvr, u16 flowid)
1393 {
1394 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1395 struct msgbuf_tx_flowring_delete_req *delete;
1396 struct brcmf_commonring *commonring;
1397 void *ret_ptr;
1398 u8 ifidx;
1399 int err;
1400
1401
1402 if (drvr->bus_if->state != BRCMF_BUS_UP) {
1403 brcmf_dbg(MSGBUF, "bus down, flowring will be removed\n");
1404 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1405 return;
1406 }
1407
1408 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1409 brcmf_commonring_lock(commonring);
1410 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
1411 if (!ret_ptr) {
1412 bphy_err(drvr, "FW unaware, flowring will be removed !!\n");
1413 brcmf_commonring_unlock(commonring);
1414 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1415 return;
1416 }
1417
1418 delete = (struct msgbuf_tx_flowring_delete_req *)ret_ptr;
1419
1420 ifidx = brcmf_flowring_ifidx_get(msgbuf->flow, flowid);
1421
1422 delete->msg.msgtype = MSGBUF_TYPE_FLOW_RING_DELETE;
1423 delete->msg.ifidx = ifidx;
1424 delete->msg.request_id = 0;
1425
1426 delete->flow_ring_id = cpu_to_le16(flowid +
1427 BRCMF_H2D_MSGRING_FLOWRING_IDSTART);
1428 delete->reason = 0;
1429
1430 brcmf_dbg(MSGBUF, "Send Flow Delete Req flow ID %d, ifindex %d\n",
1431 flowid, ifidx);
1432
1433 err = brcmf_commonring_write_complete(commonring);
1434 brcmf_commonring_unlock(commonring);
1435 if (err) {
1436 bphy_err(drvr, "Failed to submit RING_DELETE, flowring will be removed\n");
1437 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1438 }
1439 }
1440
1441 #ifdef DEBUG
1442 static int brcmf_msgbuf_stats_read(struct seq_file *seq, void *data)
1443 {
1444 struct brcmf_bus *bus_if = dev_get_drvdata(seq->private);
1445 struct brcmf_pub *drvr = bus_if->drvr;
1446 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1447 struct brcmf_commonring *commonring;
1448 u16 i;
1449 struct brcmf_flowring_ring *ring;
1450 struct brcmf_flowring_hash *hash;
1451
1452 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1453 seq_printf(seq, "h2d_ctl_submit: rp %4u, wp %4u, depth %4u\n",
1454 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1455 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
1456 seq_printf(seq, "h2d_rx_submit: rp %4u, wp %4u, depth %4u\n",
1457 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1458 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1459 seq_printf(seq, "d2h_ctl_cmplt: rp %4u, wp %4u, depth %4u\n",
1460 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1461 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1462 seq_printf(seq, "d2h_tx_cmplt: rp %4u, wp %4u, depth %4u\n",
1463 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1464 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1465 seq_printf(seq, "d2h_rx_cmplt: rp %4u, wp %4u, depth %4u\n",
1466 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1467
1468 seq_printf(seq, "\nh2d_flowrings: depth %u\n",
1469 BRCMF_H2D_TXFLOWRING_MAX_ITEM);
1470 seq_puts(seq, "Active flowrings:\n");
1471 for (i = 0; i < msgbuf->flow->nrofrings; i++) {
1472 if (!msgbuf->flow->rings[i])
1473 continue;
1474 ring = msgbuf->flow->rings[i];
1475 if (ring->status != RING_OPEN)
1476 continue;
1477 commonring = msgbuf->flowrings[i];
1478 hash = &msgbuf->flow->hash[ring->hash_id];
1479 seq_printf(seq, "id %3u: rp %4u, wp %4u, qlen %4u, blocked %u\n"
1480 " ifidx %u, fifo %u, da %pM\n",
1481 i, commonring->r_ptr, commonring->w_ptr,
1482 skb_queue_len(&ring->skblist), ring->blocked,
1483 hash->ifidx, hash->fifo, hash->mac);
1484 }
1485
1486 return 0;
1487 }
1488 #else
1489 static int brcmf_msgbuf_stats_read(struct seq_file *seq, void *data)
1490 {
1491 return 0;
1492 }
1493 #endif
1494
1495 static void brcmf_msgbuf_debugfs_create(struct brcmf_pub *drvr)
1496 {
1497 brcmf_debugfs_add_entry(drvr, "msgbuf_stats", brcmf_msgbuf_stats_read);
1498 }
1499
1500 int brcmf_proto_msgbuf_attach(struct brcmf_pub *drvr)
1501 {
1502 struct brcmf_bus_msgbuf *if_msgbuf;
1503 struct brcmf_msgbuf *msgbuf;
1504 u64 address;
1505 u32 count;
1506
1507 if_msgbuf = drvr->bus_if->msgbuf;
1508
1509 if (if_msgbuf->max_flowrings >= BRCMF_FLOWRING_HASHSIZE) {
1510 bphy_err(drvr, "driver not configured for this many flowrings %d\n",
1511 if_msgbuf->max_flowrings);
1512 if_msgbuf->max_flowrings = BRCMF_FLOWRING_HASHSIZE - 1;
1513 }
1514
1515 msgbuf = kzalloc(sizeof(*msgbuf), GFP_KERNEL);
1516 if (!msgbuf)
1517 goto fail;
1518
1519 msgbuf->txflow_wq = create_singlethread_workqueue("msgbuf_txflow");
1520 if (msgbuf->txflow_wq == NULL) {
1521 bphy_err(drvr, "workqueue creation failed\n");
1522 goto fail;
1523 }
1524 INIT_WORK(&msgbuf->txflow_work, brcmf_msgbuf_txflow_worker);
1525 count = BITS_TO_LONGS(if_msgbuf->max_flowrings);
1526 count = count * sizeof(unsigned long);
1527 msgbuf->flow_map = kzalloc(count, GFP_KERNEL);
1528 if (!msgbuf->flow_map)
1529 goto fail;
1530
1531 msgbuf->txstatus_done_map = kzalloc(count, GFP_KERNEL);
1532 if (!msgbuf->txstatus_done_map)
1533 goto fail;
1534
1535 msgbuf->drvr = drvr;
1536 msgbuf->ioctbuf = dma_alloc_coherent(drvr->bus_if->dev,
1537 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1538 &msgbuf->ioctbuf_handle,
1539 GFP_KERNEL);
1540 if (!msgbuf->ioctbuf)
1541 goto fail;
1542 address = (u64)msgbuf->ioctbuf_handle;
1543 msgbuf->ioctbuf_phys_hi = address >> 32;
1544 msgbuf->ioctbuf_phys_lo = address & 0xffffffff;
1545
1546 drvr->proto->hdrpull = brcmf_msgbuf_hdrpull;
1547 drvr->proto->query_dcmd = brcmf_msgbuf_query_dcmd;
1548 drvr->proto->set_dcmd = brcmf_msgbuf_set_dcmd;
1549 drvr->proto->tx_queue_data = brcmf_msgbuf_tx_queue_data;
1550 drvr->proto->configure_addr_mode = brcmf_msgbuf_configure_addr_mode;
1551 drvr->proto->delete_peer = brcmf_msgbuf_delete_peer;
1552 drvr->proto->add_tdls_peer = brcmf_msgbuf_add_tdls_peer;
1553 drvr->proto->rxreorder = brcmf_msgbuf_rxreorder;
1554 drvr->proto->debugfs_create = brcmf_msgbuf_debugfs_create;
1555 drvr->proto->pd = msgbuf;
1556
1557 init_waitqueue_head(&msgbuf->ioctl_resp_wait);
1558
1559 msgbuf->commonrings =
1560 (struct brcmf_commonring **)if_msgbuf->commonrings;
1561 msgbuf->flowrings = (struct brcmf_commonring **)if_msgbuf->flowrings;
1562 msgbuf->max_flowrings = if_msgbuf->max_flowrings;
1563 msgbuf->flowring_dma_handle =
1564 kcalloc(msgbuf->max_flowrings,
1565 sizeof(*msgbuf->flowring_dma_handle), GFP_KERNEL);
1566 if (!msgbuf->flowring_dma_handle)
1567 goto fail;
1568
1569 msgbuf->rx_dataoffset = if_msgbuf->rx_dataoffset;
1570 msgbuf->max_rxbufpost = if_msgbuf->max_rxbufpost;
1571
1572 msgbuf->max_ioctlrespbuf = BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST;
1573 msgbuf->max_eventbuf = BRCMF_MSGBUF_MAX_EVENTBUF_POST;
1574
1575 msgbuf->tx_pktids = brcmf_msgbuf_init_pktids(NR_TX_PKTIDS,
1576 DMA_TO_DEVICE);
1577 if (!msgbuf->tx_pktids)
1578 goto fail;
1579 msgbuf->rx_pktids = brcmf_msgbuf_init_pktids(NR_RX_PKTIDS,
1580 DMA_FROM_DEVICE);
1581 if (!msgbuf->rx_pktids)
1582 goto fail;
1583
1584 msgbuf->flow = brcmf_flowring_attach(drvr->bus_if->dev,
1585 if_msgbuf->max_flowrings);
1586 if (!msgbuf->flow)
1587 goto fail;
1588
1589
1590 brcmf_dbg(MSGBUF, "Feeding buffers, rx data %d, rx event %d, rx ioctl resp %d\n",
1591 msgbuf->max_rxbufpost, msgbuf->max_eventbuf,
1592 msgbuf->max_ioctlrespbuf);
1593 count = 0;
1594 do {
1595 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
1596 if (msgbuf->max_rxbufpost != msgbuf->rxbufpost)
1597 msleep(10);
1598 else
1599 break;
1600 count++;
1601 } while (count < 10);
1602 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1603 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
1604
1605 INIT_WORK(&msgbuf->flowring_work, brcmf_msgbuf_flowring_worker);
1606 spin_lock_init(&msgbuf->flowring_work_lock);
1607 INIT_LIST_HEAD(&msgbuf->work_queue);
1608
1609 return 0;
1610
1611 fail:
1612 if (msgbuf) {
1613 kfree(msgbuf->flow_map);
1614 kfree(msgbuf->txstatus_done_map);
1615 brcmf_msgbuf_release_pktids(msgbuf);
1616 kfree(msgbuf->flowring_dma_handle);
1617 if (msgbuf->ioctbuf)
1618 dma_free_coherent(drvr->bus_if->dev,
1619 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1620 msgbuf->ioctbuf,
1621 msgbuf->ioctbuf_handle);
1622 kfree(msgbuf);
1623 }
1624 return -ENOMEM;
1625 }
1626
1627
1628 void brcmf_proto_msgbuf_detach(struct brcmf_pub *drvr)
1629 {
1630 struct brcmf_msgbuf *msgbuf;
1631 struct brcmf_msgbuf_work_item *work;
1632
1633 brcmf_dbg(TRACE, "Enter\n");
1634 if (drvr->proto->pd) {
1635 msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1636 cancel_work_sync(&msgbuf->flowring_work);
1637 while (!list_empty(&msgbuf->work_queue)) {
1638 work = list_first_entry(&msgbuf->work_queue,
1639 struct brcmf_msgbuf_work_item,
1640 queue);
1641 list_del(&work->queue);
1642 kfree(work);
1643 }
1644 kfree(msgbuf->flow_map);
1645 kfree(msgbuf->txstatus_done_map);
1646 if (msgbuf->txflow_wq)
1647 destroy_workqueue(msgbuf->txflow_wq);
1648
1649 brcmf_flowring_detach(msgbuf->flow);
1650 dma_free_coherent(drvr->bus_if->dev,
1651 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1652 msgbuf->ioctbuf, msgbuf->ioctbuf_handle);
1653 brcmf_msgbuf_release_pktids(msgbuf);
1654 kfree(msgbuf->flowring_dma_handle);
1655 kfree(msgbuf);
1656 drvr->proto->pd = NULL;
1657 }
1658 }